XSS in Cisco Unified Meetingplace

CVE-2013-5495

Cross-site scripting (XSS) vulnerability in the web framework in the Application Server in Cisco Unified MeetingPlace allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui44681.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.014 (69.6th percentile) — read the EPSS interpretation.

Affected products

Cisco Unified_meetingplace
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)